Peter: I don't want to cause excessive work, so if it will take too much time we can have someone inspect the code to verify.
(In reply to comment #10)
> I'll try to come up with a testcase but it's not trivial. This bug was
> discovered through code inspection.
> Note that there are a bunch of talkbacks (see comment 2), but I never got the
> crash myself.
>